Brendan Dolan-Gavitt Georgia Institute of Technology - SANS
Brendan Dolan-Gavitt Georgia Institute of Technology - SANS
Brendan Dolan-Gavitt Georgia Institute of Technology - SANS
SHOW LESS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Solution: VolReg<br />
• Suite <strong>of</strong> plugins for Volatility 1.3<br />
• Provides API to access registry data<br />
from XPSP2 memory images<br />
• Adds new commands for:<br />
• Showing keys / values<br />
• Dumping registry as CSV<br />
• Extracting password hashes
Change language